Hands-on Principal Engineer, Platform Architecture & Security

DMA Global; Sydney; On-site; AUD 190,000 - 260,000; Full time

Job summary

DMA Global is rebuilding a technology platform for a boutique global financial institution. You will establish architecture, security standards, and core foundations while remaining close to code to design and build key components.

You will own platform security, API patterns, and integration layers, collaborating with Risk and Compliance and external reviewers to ensure design-by-default security and regulatory readiness.

Qualifications

• 10+ years software engineering experience with hands-on architecture work.
• Experience designing core transactional platforms (ledgers, payments, settlement).
• Strong coding in Python and familiarity with React front-ends.
• Deep AWS expertise and IaC tooling (Terraform, CDK).
• Proficient in containers, CI/CD pipelines and prod environments.
• Security engineering across IAM, encryption, threat modelling and audits.

Responsibilities

• Define and maintain the platform's target and enterprise architecture.
• Design boundaries between core platform and modules; establish API standards.
• Lead security architecture, MFA, RBAC, and encryption standards.
• Oversee security testing, remediation, and evidence packs for audits.
• Write production-grade reference code and reusable engineering patterns.
• Review architecture, designs and security code; coordinate with risk/compliance.

Skills

10+ years software engineering

Hands-on architect

Ledger and payments domain

Python

React

AWS

Infrastructure as code

Containers and CI/CD

Security engineering

Regulatory readiness (SOC 2/ISO 27001)

Technical documentation

Payment/system integration

Tools

Terraform

AWS CDK

Job description

DMA Global is rebuilding a technology platform for a boutique global financial institution. You will establish architecture, security standards, and core foundations while remaining close to code to design and build key components.

You will own platform security, API patterns, and integration layers, collaborating with Risk and Compliance and external reviewers to ensure design-by-default security and regulatory readiness.